It attempted to perform a SYN flood attack on the SSH server.

A multitude of spyware-infected download wrappers were linked to the spotted IP address.

It attempted to carry out a 'Ping of Death' operation, hoping to crash the server.

The IP attempted to perform a SIP Register Flood on the VOIP server.

The IP attempted to use the FTP server to distribute secure deletion tools.

It attempted to perform a Quake Network Protocol amplification attack on the SSH server.

This IP belongs to Citigroup.

The IP attempted fileless malware attacks, directly injecting malicious script into server memory.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

It attempted to delete files from the SSH server.

This IP belongs to Anthem.

It attempted to exploit known vulnerabilities in the IMAP protocol.

This IP belongs to IBM.

The IP attempted to use the FTP server to distribute VPN tools.

It engaged in a click fraud operation using our server’s communication channels.

It attempted to download sensitive files from the FTP server.

Server Side Request Forgery Attempts: Logs may show HTTP requests attempting to manipulate the server into making unintended requests.

The IP attempted to download emails from the IMAP server without authorization.

The IP attempted to send emails from the Mail server without proper authentication.

Login attempts from foreign IP addresses.

This IP belongs to General Electric.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

Bogus pop-ups irritating our end-users were found to be released by this infamous IP.

This IP belongs to Slack.

The IP attempted to inject malicious scripts into the server hoping it would get executed.